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Allowance 

1. Claims 1, 5-8, 12-15, 19-23 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

As to claims 1, 8, 15, 22, 23 , the prior art as taught Lee( US 2003/0135465 Al), 
Leahy et al ( US 2004/0133478 Al) and Pageet et al ( US. 5,812768) do not teach on 
render obvious the limitations recited in claims 1,8, 15, 22, 23, when taken in the context 
of the claims as a whole, wherein the wrapper object is adapted for compressing data in a 
portable executable (PE) image that provides compression of data associated with the 
applications; wherein the wrapper object equips the compressed data with extractor code 
adapted for extracting the data in the PE image; wherein the extractor code is further 
adapted for interfacing with the second application program interface object; 
wherein the applications are selected from a group of applications adapted for working in 
conjunction with the first application program interface to gain access to a network; 
wherein the second application program interface object adapted for precluding the 
applications from accessing the network is installed as recited in the independent claims 
1, 8, 15, 22, 23 . Moreover, evidence for modifying the prior art teachings by one of 
ordinary skill level in the art was not uncovered so as to result in the invention as recited 
in claims 1, 8, 15,22,23 . 

3. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany 
the issue fee. Such submissions should be clearly labeled "Comments on Statement of 
Reasons for Allowance." 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to LeChi Truong whose telephone number is ( 571) 
272 3767. The examiner can normally be reached on 8 - 5. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Thomson, William can be reached on (571) 272 3718. The fax phone 
number for the organization where this application or proceeding is assigned is 
703-872-9306. information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either Private PAIR 
of Public PAIP. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see 
htt p ://pair-direct. uspto . gov . Should you have questions on access to the Private 
PAIP system, contact the Electronic Business Center (EBC) at 866-2 17-9 ^(toll- 
free). 

LeChi Truong 
/Thomson D. William/ 
Supervisory Patent Examiner, Art Unit 2194 

March 13, 2008 
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Examiner's Amendment 

1. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided by 37 
CFR 1.312. To ensure consideration of such an amendment, it MUST be submitted no lather than 
the payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview 
with Mr. Kevin J. Zilka (Reg. No. 41,429) on 1/25/2008. 

3. Amend the following claims: 

Amended claims follow. 

1 . (Currently Amended) A method for management of network access on a per 
application basis, comprising: 

(a) selecting applications from a group of applications adapted for working in 
conjunction with a first application program interface to gain access to a network, the 
first application program interface adapted for permitting the applications to gain access 
to the network; 
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(b) installing a second application program interface adapted for precluding the 
applications from accessing the network; and 

(c) wrapping the selected applications for allowing the selected applications to access 
the network via the second application program interface, where the selected applications 
would otherwise be precluded network access by the second application program 
interface; 

wherein the selected applications are wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides compression of data 
associated with the applications; 

wherein the wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image; 

wherein the extractor code is further adapted for interfacing with the second 
application program interface . 

2. (Cancelled) 

3. (Cancelled) 

4. (Cancelled) 

5. (Currently Amended) The method as recited in claim [[2]]J_, wherein the wrapper is 
further adapted for identifying a location in memory. 
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6. (Original) The method as recited in claim 5, wherein the location in memory is where a 
routine is stored for allowing the selected applications to access the network. 

7. (Original) The method as recited in claim 1, and further comprising allowing a user to 
select the applications to be allowed to access the network via the second application 
program interface. 

8. (Currently Amended) A computer program product_embodied on a tangible computer 
readable medium for management of network access on a per application basis, 
comprising: 

(a) computer code for selecting applications from a group of applications adapted for 
working in conjunction with a first application program interface to gain access to a 
network, the first application program interface adapted for permitting the applications to 
gain access to the network; 

(b) computer code for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) computer code for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program interface, where 
the selected applications would otherwise be precluded network access by the second 
application program interface^ 
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wherein the selected applications are wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides compression of data 
associated with the applications: 

wherein the wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image; 

wherein the extractor code is further adapted for interfacing with the second application 
program interface . 



9. (Cancelled) 



10. (Cancelled) 



11. (Cancelled) 



12. (Currently Amended) The computer program product as recited in claim [[9]]8, wherein 
the wrapper is further adapted for identifying a location in memory. 



13. (Original) The computer program product as recited in claim 12, wherein the location in 
memory is where a routine is stored for allowing the selected applications to access the 
network. 
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14. (Original) The computer program product as recited in claim 8, and further comprising 
computer code for allowing a user to select the applications to be allowed to access the 
network via the second application program interface. 

15. (Currently Amended) A systemjnc hiding a tangible computer readable medium for 
management of network access on a per application basis, comprising: 

(a) logic for selecting applications from a group of applications adapted for working 
in conjunction with a first application program interface to gain access to a network, the 
first application program interface adapted for permitting the applications to gain access 
to the network; 

(b) logic for installing a second application program interface adapted for precluding 
the applications from accessing the network; and 

(c) logic for wrapping the selected applications for allowing the selected applications 
to access the network via the second application program interface, where the selected 
applications would otherwise be precluded network access by the second application 
program interface; 

wherein the selected applications are wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides compression of data 
associated with the applications; 

wherein the wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image; 
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wherein the extractor code is further adapted for interfacing with the second 
application program interface . 

16. (Cancelled) 

17. (Cancelled) 

18. (Cancelled) 

19. (Currently Amended) The system as recited in claim [[16]]1_5, wherein the wrapper is 
further adapted for identifying a location in memory. 

20. (Original) The system as recited in claim 19, wherein the location in memory is where a 
routine is stored for allowing the selected applications to access the network. 

21. (Original) The system as recited in claim 15, and further comprising logic for allowing a 
user to select the applications to be allowed to access the network via the second 
application program interface. 

22. (Currently Amended) A system including a tangible computer readable medium for 
management of network access on a per application basis, comprising: 
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(a) means for selecting applications from a group of applications adapted for working 
in conjunction with a first application program interface to gain access to a network, the 
first application program interface adapted permitting the applications to gain access to 
the network; 

(b) means for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) means for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program interface, where 
the selected applications would otherwise be precluded network access by the second 
application program interface; 

wherein the selected applications arc wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides compression of data 
associated with the applications; 

wherein the wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image; 

wherein the extractor code is further adapted for interfacing with the second 
application program interface . 



23. 



(Currently Amended) A data structure_embodied on a tangible computer readable 
medium stored in memory for management of network access on a per application basis, 
comprising: 
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(a) a second application program interface object for precluding a plurality of 
applications from accessing a network, wherein a permittin g first application program 
interface is adapted for permitting the applications to gain access to the network; and 

(b) a wrapper object for wrapping selected applications for allowing the selected 
applications to access the network via the second application program interface object, 
where the selected applications would otherwise be precluded network access by the 
second application program interface object; 

wherein the wrapper object is adapted for compressing data in a portable 
executable (PE) image that provides compression of data associated with the 
applications; 

wherein the wrapper object equips the compressed data with extractor code 
adapted for extracting the data in the PE image; 

wherein the extractor code is further adapted for interfacing with the second 
application program interface object; 

wherein the applications are selected from a group of applications adapted for 
working in conjunction with the first application program interface to gain access to a 
network; 

wherein the second application program interface object adapted for precluding the 
applications from accessing the network is installed . 



24. (Cancelled) 
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25. (Previously Presented) The method as recited in claim 2, wherein the PE image includes 
a header, a stub program, a file signature, a. text section header, a .bss section header, a 
.rdata section header, and a .debug section header. 

26. (Previously Presented) The method as recited in claim 1 , wherein the applications include 
a word processor application, a database program, a browser program, a development 
tool program, a drawing program, an image editing program, and a communication 
program. 

27. (Previously Presented) The method as recited in claim 1, wherein the second application 
program interface is adapted for precluding the applications from accessing the network 
utilizing a network card. 

28. (Previously Presented) The method as recited in claim 1 , wherein the second application 
program interface includes a modified copy of the first application program interface. 

29. (Previously Presented) The method as recited in claim 1 , wherein the second application 
program interface is separate from the first application program interface. 



Conclusion 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to LeChi Truong whose telephone number is ( 571) 272 
3767. The examiner can normally be reached on 8 - 5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Thomson, William can be reached on (571) 272 3718. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from cither Private PAIR of Public PAIP. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see htt p ://pai r-di rcct . uspto . gov . Should you 
have questions on access to the Private PAIP system, contact the Electronic Business 
Center (EBC) at 866-21 7-9 197(toll-free). 
LeChi Truong 

March 13, 2008 



/Thomson D. William/ 

Supervisory Patent Examiner, Art Unit 2194 



